$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft (raw, json) Hash identifier: t+1Qy4WqHWpsGKIVpsEOl193Elqk3Vwzvl57uH11kVM= Subject key identifier: ED:6C:A1:77:76:67:DF:AE:3C:80:69:E2:59:93:E2:34:2E:EA:76:FD Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Certificate issuer: /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Certificate serial: 39593865CBDA36F46ADE70E66C337E364F1C27AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft Manifest number: 01B5 Signing time: Sat 23 Aug 2025 17:42:03 +0000 Manifest this update: Sat 23 Aug 2025 17:37:03 +0000 Manifest next update: Tue 26 Aug 2025 23:49:03 +0000 Files and hashes: 1: 3130332e342e37362e302f32332d3234203d3e20313530323136.roa (hash: Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=) 2: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl (hash: f+R2ccMXH1heElE/3du7cqytVK0qPWQXe+9cb/b2XmM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 23:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:59:38:65:cb:da:36:f4:6a:de:70:e6:6c:33:7e:36:4f:1c:27:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Validity Not Before: Aug 23 17:37:03 2025 GMT Not After : Aug 26 23:49:03 2025 GMT Subject: CN=ED6CA1777667DFAE3C8069E25993E2342EEA76FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:d9:5f:21:dc:ae:ed:14:ea:86:f7:c1:2a: 14:45:cd:47:3e:59:60:00:3e:83:3d:83:f3:20:4f: 65:3e:78:95:f8:f3:01:d2:4e:61:7b:71:85:da:93: 05:1a:f5:3b:b3:d7:b2:a4:a1:52:fc:56:42:cc:bd: 37:4a:c7:5a:b8:30:06:50:8e:e9:9d:05:60:d9:0b: ee:3e:5e:04:4e:18:77:d6:b2:18:a8:cf:b9:56:e7: 67:9d:d6:c9:9f:18:80:78:38:e2:ea:54:5f:f9:7a: 58:6b:17:1e:51:44:d6:c0:1a:42:16:8e:2d:18:84: 11:7f:64:e1:58:75:61:72:5f:6f:8d:6a:3a:e7:39: c1:e4:2c:38:d0:c3:34:83:81:d9:a1:3a:a2:0c:f6: 05:2c:b4:ab:80:2d:e9:d3:fe:76:d5:a7:41:ba:91: 51:ce:a7:e8:f6:20:ab:fc:b0:e6:a1:35:06:66:13: 31:85:c2:22:3b:71:0f:22:09:cf:4a:66:c5:43:88: 35:5d:3e:f5:ee:63:8b:70:83:2a:e0:5f:30:7c:d5: b3:8b:9b:ad:26:7a:43:50:8c:45:52:7c:8b:03:99: 50:08:cd:85:91:43:3c:96:74:05:81:5b:80:c3:a1: 49:b4:72:ef:21:2c:83:a9:22:fd:74:f9:e5:3e:36: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:6C:A1:77:76:67:DF:AE:3C:80:69:E2:59:93:E2:34:2E:EA:76:FD X509v3 Authority Key Identifier: keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3f:3d:09:30:b0:db:81:2c:71:ba:fc:f2:05:ed:c9:31:7a: 30:08:7f:78:cc:35:c8:b1:6e:58:7a:35:39:d1:5b:f5:51:b4: 24:c1:ac:5f:f1:fa:6c:99:f5:8a:8b:68:fc:da:3e:35:5e:62: 6b:cc:21:cd:91:42:45:08:dc:1c:65:cb:ec:6f:3f:c4:a9:87: f8:e1:fd:a1:5d:f3:40:98:7c:cf:01:d9:5a:a0:93:96:98:26: 19:c6:97:24:6c:f0:14:14:f0:37:f4:cd:d4:24:91:be:fe:a7: 16:01:21:94:14:96:15:89:65:53:f5:91:27:fc:28:3f:01:19: 3e:13:cf:bf:42:35:bf:0b:8d:e1:92:cc:4c:5b:b4:4a:d8:64: 42:1a:2d:6d:b8:4b:8e:a6:17:a7:ee:fa:a3:5e:fe:f0:0b:ca: 90:8c:5e:06:e3:8a:98:f3:c2:af:ae:7b:4a:19:4b:2c:79:0d: 3e:2f:41:6b:ba:2e:9f:78:23:5f:77:72:79:80:2e:15:b4:b3: a1:2a:97:90:1c:11:5a:0c:43:ac:97:5d:00:e3:3c:7b:d7:bd: 85:f5:25:48:5a:d9:43:f2:6f:15:1d:9f:a6:14:e1:a7:ce:29: f9:ef:87:98:d7:2d:82:91:51:ac:76:e9:dc:04:a2:d8:8a:94: 0e:c5:7a:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVk4ZcvaNvRq3nDmbDN+Nk8cJ60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRF QTgxNTZEMzAeFw0yNTA4MjMxNzM3MDNaFw0yNTA4MjYyMzQ5MDNaMDMxMTAvBgNV BAMTKEVENkNBMTc3NzY2N0RGQUUzQzgwNjlFMjU5OTNFMjM0MkVFQTc2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIv9lfIdyu7RTqhvfBKhRFzUc+ WWAAPoM9g/MgT2U+eJX48wHSTmF7cYXakwUa9Tuz17KkoVL8VkLMvTdKx1q4MAZQ jumdBWDZC+4+XgROGHfWshioz7lW52ed1smfGIB4OOLqVF/5elhrFx5RRNbAGkIW ji0YhBF/ZOFYdWFyX2+NajrnOcHkLDjQwzSDgdmhOqIM9gUstKuALenT/nbVp0G6 kVHOp+j2IKv8sOahNQZmEzGFwiI7cQ8iCc9KZsVDiDVdPvXuY4twgyrgXzB81bOL m60mekNQjEVSfIsDmVAIzYWRQzyWdAWBW4DDoUm0cu8hLIOpIv10+eU+Nh77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Wyhd3Zn3648gGniWZPiNC7qdv0wHwYDVR0j BBgwFoAUP7/pLVsiDps2s3vNMJHXVOqBVtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMC8zRkJGRTkyRDVC MjIwRTlCMzZCMzdCQ0QzMDkxRDc1NEVBODE1NkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3NTRFQTgx NTZEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI5NDAxZDAtMjZhNy00Nzg3LWI2 OGEtMTgyYjE1MmE5NTEzLzAvM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3QkNEMzA5MUQ3 NTRFQTgxNTZEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw/PQkwsNuBLHG6/PIF7ckxejAIf3jMNcix blh6NTnRW/VRtCTBrF/x+myZ9YqLaPzaPjVeYmvMIc2RQkUI3Bxly+xvP8Sph/jh /aFd80CYfM8B2Vqgk5aYJhnGlyRs8BQU8Df0zdQkkb7+pxYBIZQUlhWJZVP1kSf8 KD8BGT4Tz79CNb8LjeGSzExbtErYZEIaLW24S46mF6fu+qNe/vALypCMXgbjipjz wq+ue0oZSyx5DT4vQWu6Lp94I193cnmALhW0s6Eql5AcEVoMQ6yXXQDjPHvXvYX1 JUha2UPybxUdn6YU4afOKfnvh5jXLYKRUax26dwEotiKlA7Feik= -----END CERTIFICATE-----Generated at Sat Aug 23 23:57:54 2025 by rpki-client